Submit #578013: Open Asset Import Library Assimp 5.4.3 Heap Out of Bounds Readinfo

TitleOpen Asset Import Library Assimp 5.4.3 Heap Out of Bounds Read
DescriptionThere exist two heap OOB reads in MDLImporter::ParseSkinLump_3DGS_MDL7 / SkipSkinLump_3DGS_MDL7. The use of strlen on a buffer leads to an overread when the buffer does not contain a NULL-terminated string.
Source⚠️ https://github.com/assimp/assimp/issues/6176
User
 Anonymous User
Submission05/15/2025 10:08 (11 months ago)
Moderation05/26/2025 15:03 (11 days later)
StatusAccepted
VulDB entry310293 [Open Asset Import Library Assimp 5.4.3 MDLMaterialLoader.cpp ParseSkinLump_3DGS_MDL7 out-of-bounds]
Points17

◂ PreviousOverviewNext ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!